← Back

CVE-2005-0754

nvd nist
Published: Apr 22, 2005Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.

Affected (18)

Products: Conectiva: Linux · Kde: Quanta, Kde · Gentoo: Linux · +2 more
Show all products
1 product
Linux
2 products
Quanta
Kde
1 product
Linux
1 product
Fedora Core
1 product
Ubuntu Linux
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Conectiva
Version 10.0
Version 9.0
Version 3.1
Configuration B
15 vulnerable
Vulnerable SoftwareAffected Versions
All versions
Kde
Version 3.2.1
Version 3.2.2
Version 3.2.3
Version 3.2
Version 3.3.1
Version 3.3.2
Version 3.3
Version 3.4
Version core_3.0
Ubuntu
Version 4.1
Version 4.1
Version 5.04
Version 5.04
Version 5.04

References (10)

ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff (unsafe URL)
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
PatchVendor Advisory
ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.